Project

General

Profile

Actions
Copy link

Bug #8451

closed
JI PA

http2: http.host does not match as soon as possible

Bug #8451: http2: http.host does not match as soon as possible

Added by Jason Ish about 2 months ago. Updated 23 days ago.

Status:
Closed
Priority:
Normal
Assignee:
Philippe Antoine
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

http2: http.host does not match as soon as possible

because the progress for the keyword is one step later than it could be

Subtasks

Related issues 3 (2 open — 1 closed)

Related to Suricata - Feature #8386: firewall: support HTTP2 hook states for per-frame accept/drop decisionsNewActions
Related to Suricata - Optimization #8518: http2: for stream based tx, split progress handling per directionAssignedPhilippe AntoineActions
Blocked by Suricata - Bug #8454: doh2: FN with rulesets combining dns rules and http2 rulesClosedPhilippe AntoineActions

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #1

  • Related to Feature #8386: firewall: support HTTP2 hook states for per-frame accept/drop decisions added

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #2

  • Status changed from New to Assigned
  • Assignee changed from OISF Dev to Philippe Antoine
  • Target version changed from TBD to 9.0.0-beta1

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #3

  • Label Needs backport to 7.0, Needs backport to 8.0 added

OT Updated by OISF Ticketbot about 2 months ago Actions
Copy link
 #4

  • Subtask #8452 added

OT Updated by OISF Ticketbot about 2 months ago Actions
Copy link
 #5

  • Label deleted (Needs backport to 8.0)

OT Updated by OISF Ticketbot about 2 months ago Actions
Copy link
 #6

  • Subtask #8453 added

OT Updated by OISF Ticketbot about 2 months ago Actions
Copy link
 #7

  • Label deleted (Needs backport to 7.0)

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #8

  • Subject changed from http2: http.host fails to match some http/2 patterns to http2: http.host does not match as soon as possible

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #9

  • Blocked by Bug #8454: doh2: FN with rulesets combining dns rules and http2 rules added

PA Updated by Philippe Antoine about 2 months ago Actions
Copy link
 #10

  • Status changed from Assigned to In Review

I think it can be made public

JI Updated by Jason Ish about 2 months ago Actions
Copy link
 #11

@Philippe Antoine Can you update the title and the description based on your findings?

PA Updated by Philippe Antoine about 1 month ago ยท Edited Actions
Copy link
 #13

Jason Ish wrote in #note-11:

@Philippe Antoine Can you update the title and the description based on your findings?

For the record, I had done that, except I do not know how to update the description (where to click on redmine)

PA Updated by Philippe Antoine about 1 month ago Actions
Copy link
 #14

  • Status changed from In Review to Resolved

PA Updated by Philippe Antoine 28 days ago Actions
Copy link
 #15

  • Description updated (diff)

JI Updated by Jason Ish 28 days ago Actions
Copy link
 #16

  • Private changed from Yes to No

PA Updated by Philippe Antoine 24 days ago Actions
Copy link
 #17

  • Related to Optimization #8518: http2: for stream based tx, split progress handling per direction added

PA Updated by Philippe Antoine 23 days ago Actions
Copy link
 #18

  • Status changed from Resolved to Closed
Actions
Copy link

Also available in: PDF Atom